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Early systems for networked intrusion detection (or, more generally, intrusion or misuse 
management) required either a centralized architecture or a centralized decision-making 
point, even when the data gathering was distributed. More recently, researchers have 
developed far more decentralized intrusion detection systems using a variety of 
techniques. Such systems often rely upon data sharing between sites which do not have a 
common administrator and therefore cooperation will be required i ... 
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This paper addresses the threat to multilevel security that arises from logical inference 
and the semantics of the application. Such compromises of security are particularly 
challenging since they circumvent traditional security mechanisms and rely on a user's 
knowledge of the application. The problems of inference and security have heretofore 
been amorphous and difficult to circumscribe. We focus on these problems in the context 
of a multilevel database system and show their relevance to k ... 
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In this paper, we report on our experiences with guaranteeing GC-pointer safety when 
using unsafe low-level language extensions to implement a JVM in Java. We give an 
overview of the original unsafe language extensions that were defined for use by Jalapeno 
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Routers classify packets to determine which flow they belong to, and to decide what 
service they should receive. Classification may, in general, be based on an arbitrary 
number of fields in the packet header. Performing classification quickly on an arbitrary 
number of fields is known to be difficult, and has poor worst-case performance. In this 
paper, we consider a number of classifiers taken from real networks. We find that the 
classifiers contain considerable structure and redundancy that can ... 
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We consider an architecture for a serverless distributed file system that does not assume 
mutual trust among the client computers. The system provides security, availability, and 
reliability by distributing multiple encrypted replicas of each file among the client 
machines. To assess the feasibility of deploying this system on an existing desktop 
infrastructure, we measure and analyze a large set of client machines in a commercial 
environment. In particular, we measure and report results on ... 
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The problems of designing large software systems were studied through interviewing 
personnel from 17 large projects. A layered behavioral model is used to analyze how 
three of these problems— the thin spread of application domain knowledge, fluctuating 
and conflicting requirements, and communication bottlenecks and breakdowns— affected 
software productivity and quality through their impact on cognitive, social, and 
organizational processes. 
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In the United States, artificial intelligence (AI) research is mainly a story about military 
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1960s, AI research has received most of its support from the military research 
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